MEDIUM🇬🇧 English

CVE-2019-3760

CVSS 6.4v3.1pub. 2019-09-11upd. 2024-11-21

The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a SQL Injection vulnerability in Workflow Architect. A remote authenticated malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to gain unauthorized access to the data by supplying specially crafted input data to the affected application.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

  • Dell Rsa Identity Governance And Lifecycle

    APP
    Dell
    7.0.17.0.27.1.07.1.1

  • Dell Rsa Via Lifecycle And Governance

    APP
    Dell
    7.0.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
SQLi
CWE
Referencje

Powiązane podatności

CVE-2019-18572CRITICAL9.8ten sam produkt

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 con...

CVE-2019-18573HIGH8.8ten sam produkt

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 con...

CVE-2019-3763HIGH8.8ten sam produkt

The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1....

CVE-2019-18571MEDIUM5.4ten sam produkt

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 con...

CVE-2019-3759MEDIUM6.4ten sam produkt

The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1....